Your data, only what the order needs.

Zippit Retail Technologies Pvt. Ltd. (fictional) is the Data Fiduciary for the personal data you share when you use the Zippit app. This policy follows the spirit of the Digital Personal Data Protection Act, 2023. Shops and runners on Zippit get their own notices.

We collect only what an order needs:

• your name and phone number;
• delivery addresses you save, and a map pin for each;
• your location while the app is open, if you allow it, to find hubs and shops near you;
• what you order, from which shops, and how you paid (never your full card or UPI PIN);
• basic device details, so the app works and stays secure.

To take your order to the right shops, get it to your door, take payment, fix problems and prevent fraud. With your consent we also send order updates and offers. We use aggregated, de-identified numbers to improve the service.

We do not sell your personal data.

We ask before we use your location, send you offers or use your data for anything beyond the order itself. Each request is separate and in plain language. No box is pre-ticked.

You can withdraw consent at any time in Account → Settings. Withdrawing may mean some features, such as finding hubs near you, stop working.

• Shops see your first name, your items and an order number. They do not see your phone number or full address.
• Runners see the drop-off pin, your first name and a masked call button while an order is active.
• Payment partners process your payment under their own policies.
• Authorities receive data only when a valid legal order requires it.

You can ask us to:

• show you the personal data we hold about you;
• correct anything that is wrong or out of date;
• erase your data, except what the law says we must keep;
• nominate someone to exercise these rights for you if you cannot;
• respond to a grievance about how we handle your data.

Order history can be deleted in the app. For everything else, write to our Data Protection Officer or use the grievance process.

Zippit is for people aged 18 and over. If someone under 18 uses it, a parent or guardian must give consent on their behalf. We do not target children with offers.

Data is encrypted in transit and at rest, and access is limited to the people who need it. If a breach ever affects you, we will tell you and the Data Protection Board of India as the law requires.

Mr. Karthik Nair (fictional)
Data Protection Officer, Zippit Retail Technologies Pvt. Ltd. (fictional)
dpo@zippit.example

We reply within 7 days. For anything unresolved, see the grievance officer page.